SIPfoundry sipXtapi (CSeq) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl Remote Buffer Overflow in sipXtapi bad char 0x00 0x09 0x0a 0x0d 0x20 use IO::Socket; use strict; print "\n\n"; print "sipXtapi original Exploit by Michael Thumann added a real shellcode by acaro\n\n"; print "tested on sipXphone 2.6.0.27 read the...

solaris/sparc connect-back with XNOR encoded session 600 bytes

solaris/sparc connect-back with XNOR encoded session 600 bytes. Shellcode exploit for solarissparc platform / black-RXenc-con-back-SOLARIS.c MIPS This is a relitivly small 600 byte shellcode that encodes all network trafic between the exploited process and the attacker. All clear-text shell i/o i...

solaris/sparc connect-back (with XNOR encoded session) 600 bytes

Exploit for solaris/sparc platform in category shellcode ================================================================ solaris/sparc connect-back with XNOR encoded session 600 bytes ================================================================ / black-RXenc-con-back-SOLARIS.c MIPS This is a...

Microsoft IIS ASP Stack Overflow Exploit (MS06-034)

No description provided by source. include stdio.h include windows.h / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by cocoruderfrankruderathotmail.com,2006/7/13 page:http://ruder.cdut.net/default.asp successfully test on Windows 2000 Server SP4+IIS5.0, On Windows 2003 Server+IIS6.0,because t...

Microsoft IIS - ASP Stack Overflow (MS06-034)

Microsoft IIS - ASP Stack Overflow MS06-034 include include / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by cocoruderfrankruderathotmail.com,2006/7/13 page:http://ruder.cdut.net/default.asp successfully test on Windows 2000 Server SP4+IIS5.0, On Windows 2003 Server+IIS6.0,because the new SE...

Cyrus IMAPD 2.3.2 - pop3d Remote Buffer Overflow (2)

Cyrus IMAPD 2.3.2 - pop3d Remote Buffer Overflow 2 !/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit 05/23/2006 This exploit takes advantage of a stack based overflow. Once the stack corruption has occured it is possible to overwrite a pointer which is later used for a memcpy this gives us a...

Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit (2)

No description provided by source. !/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit 05/23/2006 This exploit takes advantage of a stack based overflow. Once the stack corruption has occured it is possible to overwrite a pointer which is later used for a memcpy this gives us a write anything...

Microsoft IIS ASP Stack Overflow Exploit (MS06-034)

Exploit for unknown platform in category local exploits =================================================== Microsoft IIS ASP Stack Overflow Exploit MS06-034 =================================================== include include / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by...

Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit (2)

Exploit for multiple platform in category remote exploits ============================================================ Cyrus IMAPD 2.3.2 pop3d Remote Buffer Overflow Exploit 2 ============================================================ !/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit...

Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (2)

!/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit 05/23/2006 This exploit takes advantage of a stack based overflow. Once the stack corruption has occured it is possible to overwrite a pointer which is later used for a memcpy this gives us a write anything anywhere condition similar to a forma...

Microsoft IIS - ASP Stack Overflow (MS06-034)

include include / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by cocoruderfrankruderathotmail.com,2006/7/13 page:http://ruder.cdut.net/default.asp successfully test on Windows 2000 Server SP4+IIS5.0, On Windows 2003 Server+IIS6.0,because the new SEH protection mechanisms, you should set the...

linux/x86 setuid(0) and /bin/sh execve() shellcode 30 bytes

Exploit for linux/x86 platform in category shellcode =========================================================== linux/x86 setuid0 and /bin/sh execve shellcode 30 bytes =========================================================== / $Id: setuid-linux.c,v 1.4 2004/06/02 12:22:30 raptor Exp $...

bsd/x86 - setuid/portbind shellcode 94 bytes

bsd/x86 setuid/portbind shellcode 94 bytes. Shellcode exploit for bsdx86 platform / $Id: portbind-bsd.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ portbind-bsd.c - setuid/portbind shellcode for BSD/x86 Copyright c 2003 Marco Ivaldi Simple portbind shellcode that bind's a setuid0 shell on port 31337/t...

linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes

Exploit for linux/x86 platform in category shellcode ================================================================ linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes ================================================================ / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46...

linux/x86 - setuid/portbind shellcode 96 bytes

linux/x86 setuid/portbind shellcode 96 bytes. Shellcode exploit for linx86 platform / $Id: portbind-linux.c,v 1.4 2004/06/02 12:22:30 raptor Exp $ portbind-linux.c - setuid/portbind shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi Simple portbind shellcode that bind's a setuid0 shell on port...

linux/x86 stdin re-open and /bin/sh exec shellcode

Exploit for linux/x86 platform in category shellcode ================================================== linux/x86 stdin re-open and /bin/sh exec shellcode ================================================== / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open...

linux/x86 setuid/portbind shellcode 96 bytes

Exploit for linux/x86 platform in category shellcode ============================================ linux/x86 setuid/portbind shellcode 96 bytes ============================================ / $Id: portbind-linux.c,v 1.4 2004/06/02 12:22:30 raptor Exp $ portbind-linux.c - setuid/portbind shellcode f...

bsd/x86 - setuid/execve shellcode 30 bytes

bsd/x86 setuid/execve shellcode 30 bytes. Shellcode exploit for bsdx86 platform / $Id: setuid-bsd.c,v 1.6 2004/06/02 12:22:30 raptor Exp $ setuid-bsd.c - setuid/execve shellcode for BSD/x86 Copyright c 2003 Marco Ivaldi Short setuid0 and /bin/sh execve shellcode based on esdee's code. Tested on...

linux/x86 - re-use of /bin/sh string in .rodata shellcode 16 bytes

linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes. Shellcode exploit for linx86 platform / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46 raptor Exp $ reusage-linux.c - re-use of "/bin/sh" string in .rodata Copyright c 2003 Marco Ivaldi Short local shellcode for /bin/sh execve. It...

linux/x86 - setuid0 and /bin/sh execve shellcode 30 bytes

linux/x86 setuid0 and /bin/sh execve shellcode 30 bytes. Shellcode exploit for linx86 platform / $Id: setuid-linux.c,v 1.4 2004/06/02 12:22:30 raptor Exp $ setuid-linux.c - setuid/execve shellcode for Linux/x86 Copyright c 2004 Marco Ivaldi Short fully-functional setuid0 and /bin/sh execve...